EUVD-2022-40767

Malicious code in bioql PyPI...

CVE-2021-30860

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this...

Security fix for the ALT Linux 10 package poppler115 version 21.11.0-alt1.p10.1

21.11.0-alt1.p10.1 built Jan. 20, 2023 Andrey Cherepanov in task 313730 Jan. 19, 2023 Andrey Cherepanov - JBIG2Stream: Fix crash on broken file CVE-2021-30860, CVE-2022-27337, CVE-2022-38784...

GLSA-202209-21 : Poppler: Arbitrary Code Execution

The remote host is affected by the vulnerability described in GLSA-202209-21 Poppler: Arbitrary Code Execution - An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2...

Fedora: Security Advisory for mingw-poppler (FEDORA-2022-f7b375eae8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[slackware-security] poppler

New poppler packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/poppler-21.12.0-i586-2slack15.0.txz: Rebuilt. PATCH JBIG2Stream: Fix crash on broken file. For more information, see:...

Slackware Linux 15.0 / current poppler Vulnerability (SSA:2022-244-01)

The version of poppler installed on the remote host is prior to 21.12.0 / 22.09.0. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-244-01 advisory. - An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005...

Integer overflow

Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIG2Stream.cc. Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by...

CVE-2022-38171

Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIG2Stream.cc. Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described by...

Exploit for Integer Overflow or Wraparound in Apple Ipados

PoC exploit for CVE-2021-30860, a vulnerability in Apple's Xcode...

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution

Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and Apple’s Security Engineering and Architecture SEAR group for collaborating with us on the technical analysis. The editorial opinions reflected below ar...

Apple Patches 3 More Zero-Days Under Active Attack

Apple has patched three actively exploited zero-day security vulnerabilities in updates to iOS and macOS, one of which can allow an attacker to execute arbitrary code with kernel privileges. Apple released two updates on Thursday: iOS 12.5.5, which patches three zero-days that affect older versio...

Detect & Prioritize NSO Pegasus iPhone Spyware Vulnerabilities Using VMDR for Mobile Devices

Apple recently released iOS and iPadOS 14.8 as a security update that addresses 2 critical zero-day vulnerabilities, which are used to deploy NSO Pegasus iPhone spyware. Qualys recommends that security teams should immediately update all devices running iOS and iPadOS to the latest version. "Appl...

Exploit for Integer Overflow or Wraparound in Apple Ipados

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY is a known vulnera...

macOS 11.x < 11.6 (HT212804)

The remote host is running a version of macOS / Mac OS X that is 11.x prior to 11.6 Big Sur. It is, therefore, affected by multiple vulnerabilities including the following: - A use after free issue was addressed with improved memory management. Exploitation of this vulnerability may lead to...

Apple Mac OS X Security Update (HT212805)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Issues Emergency Fix for NSO Zero-Click Zero Day

Apple users should immediately update all their devices – iPhones, iPads, Macs and Apple Watches – to install an emergency patch for a zero-click zero-day exploited by NSO Group to install spyware. The security updates, pushed out by Apple on Monday, include iOS 14.8 for iPhones and iPads, as wel...

CVE-2021-30860

creationtimestamp| type| source ---|---|--- 2021-09-13 17:41:24+00:00| exploited| https://t.me/alexmakus/4286 2021-09-13 20:48:27+00:00| exploited| https://t.me/cKure/7075 2021-09-13 21:38:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2021 2021-09-14 00:07:44+00:00|...

About the security content of watchOS 7.6.2

About the security content of watchOS 7.6.2 This document describes the security content of watchOS 7.6.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Apple Releases Security Updates to Address CVE-2021-30858 and CVE-2021-30860

Apple has released security updates to address vulnerabilities—CVE-2021-30858 and CVE-2021-30860—in multiple products. An attacker could exploit these vulnerabilities to take control of an affected device. CISA is aware of public reporting that these vulnerabilities may have been exploited in the...